*** This bug is a security vulnerability ***

You have been subscribed to a public security bug by Seth Arnold (seth-arnold):

Alpine email client crashes caused by impoper handling of command line
parameters. It was already submitted to the project's developer and
fixed:

- https://repo.or.cz/alpine.git/commit/3443fe5fcfcb33d3a2510111855e619632de57df
- https://logicaltrust.net/blog/2019/08/alpine.html

Bugs confirmed on Ubuntu 18.04, 
$ apt-cache policy alpine
alpine:
  Installed: 2.21+dfsg1-1build1
  Candidate: 2.21+dfsg1-1build1
  Version table:
 *** 2.21+dfsg1-1build1 500
        500 http://pl.archive.ubuntu.com/ubuntu bionic/universe amd64 Packages
        100 /var/lib/dpkg/status


- alpine -url '#'
- alpine -i -f ABCD < /dev/null
- alpine -last-time-prune-questioned=116,3


If you can assigne CVE, please credit us as: Mateusz Kocielski and MichaƂ 
Dardas from LogicalTrust

** Affects: alpine (Ubuntu)
     Importance: Undecided
         Status: New

-- 
alpine crash on startup caused by cmd parameters
https://bugs.launchpad.net/bugs/1878961
You received this bug notification because you are a member of Ubuntu Bugs, 
which is subscribed to the bug report.

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to